
Claims 

A method for dynamically selecting a firewall server 
(603) f\or a web client (601), in particular a web browser 
(601), \ in a Transmission Control Protocol/Internet 
Protocol! (TCP/IP) network comprising a plurality of 
firewall\ servers (503) , 
said method comprising the steps of : 

• meastiring performance and availability of each 
fireball server (603) using measurement probes 
(607)\; 

• dynamically selecting a firewall server according to 
the rt>erformance and availability measurements 
(607) 



2- The method Recording to the preceding claim wherein the 
step of measuring the performance and availability of 
each firewall\ server (603) using measurement probes (607) 
comprises the\ further step of: 

• measuring! the response time needed for retrieving 
from a ^eb server (605) known information, in 
particulaiA one or a plurality of known web pages, 
through eafch firewall server (603); 



3. The method accoiiding to the preceding claim wherein the 
step of measuring the 

response time comprises the further steps of: 



• establishing\ (402) a connection with the web server 
(605) through each firewall server (603); 
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• retrieving (4oi) the one or a plurality of known web 
pages from the veb server (605); 



checking (405) 
web pages conta 



:hat the retrieved one or plurality of 
one or a plurality of known keywords. 



in 



The method accordi 
wherein the step 
firewall server 
comprises the fur 



cr 



• comparing f 
response time? 



• determining 
or the ameli 



ng to any one of the preceding claims 
of measuring the performance of each 
(603) using measurement probes (607) 
ijher step of: 



each firewall server said measured 
with previous measured response times; 



wherein the step 
firewall server 
the further step 



for each firewall (603) the degradation 
oration of the measured response time. 



5. The method accorjling to any one of the preceding claims 

of measuring the availability of each 
using measurement probes (607) comprises 
of: 



• detecting f 



excluding f|i 
of selectinb 



ciilures on each firewall server; 



The method accoi- 



rewall servers in failure from the step 
a firewall server. 



•ding to any one of the preceding claims 
wherein said f:. rewall server (603) is a proxy server 
(304) or/and a socks server (311) . 
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The method accord 



ing to any one of the preceding claims 



comprising 



the further steps of: 



\ 



processing performance and availability measurements 
(607) from a single universal resource locator 
(URL) system (606) ; 
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• dynamically 



10 



creating a configuration file based on 



the perfornance and availability measurements, 

preferably in Javascript language, on said universal 

resource locator (URL) system (606) for selecting 
said firewall server (603; 



8. The method according to any one of the preceding claims 
wherein the step of dynamically creating a configuration 
file is proces;;ed by a common gateway interface (CGI) 
(608) on said universal resource locator (URL) system 
(606) . 



The method acco 
wherein the stqp 
of selecting 
further step of 



rding to any one of the preceding claims 



a firewall server (603) comprises the 



downloadir 
universal 
web client. 



The method accfo 
wherein the 
availability 
server (603) 
resource locat 
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the configuration file from the 
resource locator (URL) system (606) to the 
, in particular to the web browser (601) . 



rding to any one of the preceding claims 
steps of measuring performance and 
nd of dynamically selecting a firewall 
periodically processed in the universal 
r (URL) system (606) and the configuration 
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are 



# 




file created by the common gateway interface (608) (CGI) 
is periodically downloaded to the web client (601) . 
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11. The method accordi 
comprising the fur 



ig to any one of the preceding claims 
t/her steps of: 



• pre-selecting 
background prcjce 



• switching to 



a backup firewall server (603) in a 
ss ; 



said backup firewall server in case of 



failure of the selected firewall server, 



12. The method accord 
wherein step of s 
performance and a 
further step of: 



:Lng to any one of the preceding claims 
lecting a firewall server according to 
^ailability measurements comprises the 



• selecting 
Internet Pro 



th/e firewall server according to the 
Ijocol (IP) address. 



si 



13. A system compri 
method according 1: 



ng means adapted for carrying out the 
o any one of the preceding claims. 
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